diff --git a/changelog/updates/2023-08-11-openldap-2.6.3.md b/changelog/updates/2023-08-11-openldap-2.6.3.md
new file mode 100644
index 0000000000..3fbc86fd49
--- /dev/null
+++ b/changelog/updates/2023-08-11-openldap-2.6.3.md
@@ -0,0 +1 @@
+- openldap ([2.6.3](https://lists.openldap.org/hyperkitty/list/openldap-announce@openldap.org/thread/FQJM2JSSSOMLQH7XC7Q5IZJYOGCTV2LK/) (includes [2.6](https://lists.openldap.org/hyperkitty/list/openldap-announce@openldap.org/thread/IHS5V46H6NFNFUERMC6AWMPHTWRVNLFA/)))
diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.mask b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.mask
index 081757131d..97238158c1 100644
--- a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.mask
+++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.mask
@@ -20,8 +20,3 @@
 # Python 3.12 is in portage-stable (currently testing), so avoid picking it
 # up. Update this to mask later versions when we switch to 3.11.
 >=dev-lang/python-3.12
-
-# Do not update to openldap 2.6.3+, to take 2 different steps of updating
-# openldap, 1) from 2.4 to 2.5, 2) do an Alpha release around 2023-08, and
-# 3) finally update from 2.5 to 2.6.
->=net-nds/openldap-2.6